2026-07-02_45027939812525bcb3f9af546c690455_bkransomware_darkgate_elex_maze

General

Target
2026-07-02_45027939812525bcb3f9af546c690455_bkransomware_darkgate_elex_maze
Size 664KB
Sample260702-ea86tsbw4v
SHA256 88e2bce8a2f5fdabbdab8336d8a776f04079c3ee4ee151c049144384340654fc
MD5 45027939812525bcb3f9af546c690455
SHA1 1cf8cad520b044bd8bb9819bc330f05f89e72f03
SHA512 d9769958c8f7ef4baec512eda087b1f0d00ded437467de2ef32b03ec4442d9b9a3adaabab959771e0611db8b854fd533acef4a9e233cc2808fc73ee08072fa55
SSDEEP 12288:U3fxp8YiYOySsq7VXVnn0Km5S+mL8dByMOz2BkOCXbht5i4dc1tAUdYicBUxipjB:ax21YOtRln0K5+/KzmVMbb84KQ31DL
TLSH
T18BE48C11B563A1F3D42260F7425DF7362A29BD760F298AE3EBC74F2549E26C09933253
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-02_45027939812525bcb3f9af546c690455_bkransomware_darkgate_elex_maze

File Explorer

2026-07-02_45027939812525bcb3f9af546c690455_bkransomware_darkgate_elex_maze

.exe 664KB

2026-07-02_45027939812525bcb3f9af546c690455_bkransomware_darkgate_elex_maze

IMPHASH 1b399d7619c05ba833bb729a062bba4e
SHA256 88e2bce8a2f5fdabbdab8336d8a776f04079c3ee4ee151c049144384340654fc
MD5 45027939812525bcb3f9af546c690455
SHA1 1cf8cad520b044bd8bb9819bc330f05f89e72f03
SHA512 d9769958c8f7ef4baec512eda087b1f0d00ded437467de2ef32b03ec4442d9b9a3adaabab959771e0611db8b854fd533acef4a9e233cc2808fc73ee08072fa55
SSDEEP 12288:U3fxp8YiYOySsq7VXVnn0Km5S+mL8dByMOz2BkOCXbht5i4dc1tAUdYicBUxipjB:ax21YOtRln0K5+/KzmVMbb84KQ31DL
TLSH
T18BE48C11B563A1F3D42260F7425DF7362A29BD760F298AE3EBC74F2549E26C09933253
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

386054

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress GetModuleHandleA GetLastError HeapFree HeapAlloc HeapReAlloc GetSystemTimeAsFileTime EncodePointer DecodePointer ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetTimeZoneInformation GetTempPathA CloseHandle DuplicateHandle GetCurrentProcess CreateProcessW Beep Sleep ReadFile GetFullPathNameW DeleteCriticalSection GetCommandLineA IsProcessorFeaturePresent GetProcessHeap GetStdHandle WriteFile GetModuleFileNameW SetLastError GetCurrentThread GetCurrentThreadId IsDebuggerPresent EnterCriticalSection LeaveCriticalSection RtlUnwind GetConsoleCP GetConsoleMode FatalAppExitA UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount CreateEventW TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetTickCount GetModuleHandleW CreateSemaphoreW SetConsoleCtrlHandler FreeLibrary LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo FindClose FindFirstFileExW GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime GetFileType GetStringTypeW SetFilePointerEx GetCurrentProcessId CreatePipe GetFileAttributesExW CreateProcessA ReadConsoleW RaiseException FlushFileBuffers DeleteFileW GetModuleFileNameA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW OutputDebugStringW SetStdHandle WriteConsoleW HeapSize GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FileTimeToLocalFileTime GetFileInformationByHandle PeekNamedPipe SetCurrentDirectoryW GetCurrentDirectoryW CreateFileW WaitForSingleObject GetExitCodeProcess GetFullPathNameA SetEndOfFile SetEnvironmentVariableA SetEnvironmentVariableW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-02_45027939812525bcb3f9af546c690455_bkransomware_darkgate_elex_maze

kernel32

generic